Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lr-V2c4m9xLqZedsOQ8mzoNUWt0.roa
File: Lr-V2c4m9xLqZedsOQ8mzoNUWt0.roa (raw, json)
Hash identifier: A3yP/VzA5eKWAvMIZCrqP59KEQ0AYtxuJCuIeeJOWxk=
Subject key identifier: 2E:BF:95:D9:CE:26:F7:12:EA:65:E7:6C:39:0F:26:CE:83:54:5A:DD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA233A75844F89A388DC9A192A8EE2D16
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lr-V2c4m9xLqZedsOQ8mzoNUWt0.roa
Signing time: Mon 06 Nov 2023 01:16:16 +0000
ROA not before: Mon 06 Nov 2023 01:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a2:33:a7:58:44:f8:9a:38:8d:c9:a1:92:a8:ee:2d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 01:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ebf95d9ce26f712ea65e76c390f26ce83545add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4d:33:d2:3f:dd:a9:c8:34:19:bd:76:29:31:
44:9c:cf:41:74:cc:64:8f:ac:61:1c:f6:eb:0b:cd:
1d:81:ec:0c:f5:af:d4:d9:6b:d6:1e:74:3a:58:3e:
eb:11:65:30:b5:ed:3d:c1:05:3d:4d:d6:55:47:9e:
c3:b5:68:9e:7e:3b:bd:40:d4:30:4b:06:fc:88:11:
80:79:45:86:c2:ab:9a:6f:1e:ee:87:85:80:58:9d:
18:f5:76:64:1a:a6:94:fc:09:ff:32:56:4e:d6:13:
64:33:a3:16:cc:f7:4a:a1:25:9c:2e:4e:66:59:4c:
a0:65:79:2a:b4:dd:cd:ed:2c:f1:f7:93:00:f8:52:
dc:60:b0:a2:39:cb:98:85:05:21:76:13:91:af:95:
0f:d8:4a:1f:7e:9e:a2:21:8f:63:0d:68:d7:87:71:
a2:98:4d:43:ad:f1:1e:5e:b7:23:73:1b:14:4c:d4:
d2:99:eb:03:83:19:49:5f:05:2f:3f:80:61:b6:a2:
6b:56:0a:95:af:28:ed:4b:cf:0c:41:2d:73:93:ee:
d5:f6:5c:13:2d:30:5a:16:10:d6:d5:34:dd:2f:25:
74:31:4a:8b:d0:eb:3d:ec:ef:9b:da:ee:ae:64:e6:
9b:dc:f6:c1:fa:0a:12:6c:65:bd:ca:6b:87:d0:2a:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BF:95:D9:CE:26:F7:12:EA:65:E7:6C:39:0F:26:CE:83:54:5A:DD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lr-V2c4m9xLqZedsOQ8mzoNUWt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:a1:62:01:b2:71:97:cc:2c:3f:c4:b3:75:0c:fc:d4:24:64:
9e:31:f5:94:46:78:3a:24:16:af:ce:f4:e8:32:c7:4a:42:ed:
29:72:be:71:92:d6:0d:b9:01:22:00:ce:45:49:27:26:e7:a9:
a2:76:57:31:a1:6c:16:2d:84:d0:8e:8d:3d:a8:22:93:c4:4c:
1e:02:24:df:40:1e:27:20:5f:ed:16:40:31:d6:7e:27:83:73:
60:81:14:52:f9:cd:3e:34:2d:3c:a7:92:2b:3b:25:da:29:bc:
24:2c:55:ac:ee:3f:f0:6d:e1:22:ab:7a:8b:e3:ea:30:3f:9c:
d4:2c:0c:5d:de:2f:34:8a:4b:84:b3:b0:dd:86:d1:eb:d8:ea:
4a:62:91:3c:6f:ee:36:2f:3d:9a:d8:17:32:87:ef:55:4a:c4:
f0:84:a8:f9:7e:de:58:1b:ff:36:86:1d:fa:ec:1d:d6:dd:f1:
6e:3b:28:4c:4e:12:75:ac:e8:95:32:b6:56:ef:de:54:fb:8e:
9a:33:6d:53:0f:bc:17:b8:5c:3f:de:bd:90:0a:1c:0d:e6:3c:
74:86:51:8b:32:a5:4f:66:d1:cd:1d:7d:81:55:ee:43:aa:37:
1e:58:32:30:41:b7:ab:77:b0:8c:36:3d:0c:d3:2f:7a:69:6b:
86:77:a4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:55:50 2025 by rpki-client